Package org.keycloak.services.clientpolicy.executor

Class DownscopeAssertionGrantEnforcerExecutorFactory

java.lang.Object
org.keycloak.services.clientpolicy.executor.DownscopeAssertionGrantEnforcerExecutorFactory
All Implemented Interfaces:
org.keycloak.provider.ConfiguredProvider, org.keycloak.provider.EnvironmentDependentProviderFactory, org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>, org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProviderFactory
public class DownscopeAssertionGrantEnforcerExecutorFactory extends Object implements org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProviderFactory

Factory that enforces the grant to only use scopes that are already present in the initial assertion. For the moment it can only be used in the Token Exchange context.

Author:
rmartinc

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final String
    PROVIDER_ID
     

  • Constructor Summary

    Constructors
    Constructor
    Description
    DownscopeAssertionGrantEnforcerExecutorFactory()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    void
    close()
     
    org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider
    create(org.keycloak.models.KeycloakSession session)
     
    List<org.keycloak.provider.ProviderConfigProperty>
    getConfigProperties()
     
    String
    getHelpText()
     
    String
    getId()
     
    void
    init(org.keycloak.Config.Scope config)
     
    void
    postInit(org.keycloak.models.KeycloakSessionFactory factory)
     

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    Methods inherited from interface org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProviderFactory

    isSupported

    Methods inherited from interface org.keycloak.provider.ConfiguredProvider

    getConfig

    Methods inherited from interface org.keycloak.provider.ProviderFactory

    dependsOn, getConfigMetadata, order

  • Field Details

  • Constructor Details

    • DownscopeAssertionGrantEnforcerExecutorFactory

      public DownscopeAssertionGrantEnforcerExecutorFactory()

  • Method Details

    • create

      public org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider create(org.keycloak.models.KeycloakSession session)
      Specified by:
      create in interface org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>

    • init

      public void init(org.keycloak.Config.Scope config)
      Specified by:
      init in interface org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>

    • postInit

      public void postInit(org.keycloak.models.KeycloakSessionFactory factory)
      Specified by:
      postInit in interface org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>

    • close

      public void close()
      Specified by:
      close in interface org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>

    • getId

      public String getId()
      Specified by:
      getId in interface org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>

    • getHelpText

      public String getHelpText()
      Specified by:
      getHelpText in interface org.keycloak.provider.ConfiguredProvider

    • getConfigProperties

      public List<org.keycloak.provider.ProviderConfigProperty> getConfigProperties()
      Specified by:
      getConfigProperties in interface org.keycloak.provider.ConfiguredProvider